Goose Integration

Goose is an open-source, extensible AI agent designed to automate complex software engineering tasks directly from your desktop or terminal using multi-model support and standardized protocols like MCP.

Start for free

Goose

Benefits with Ory + Goose Integration

Ory integrates with Block's Goose to provide security guardrails for developers building and running AI agents. Ory's harness hook executes identity and credential checks on every session and tool call, enforcing fine-grained authorization to permit or deny actions while logging all activity for complete audit trails. Security teams can utilize Observe mode to monitor how developers and builders use the tools, or Enforce mode to strictly restrict agents to their authorized permissions.

The fastest way to get started with Ory Agent Security is to sign up for the Ory Network. Installing an Ory Agent Security plugin for your AI coding agent takes seconds. You simply copy and paste the provided command in the harness's project directory.

npx -y -p @ory/goose ory-goose install

View on npm

Use Cases

— 03 use cases

Agent IAM

Secures Goose agent sessions and tool execution by enforcing fine-grained authorization, identity checks, and complete audit logging.

Explore Agent IAM

CIAM

Accelerates embedding customer authentication and identity management into consumer-facing applications directly within Goose using Ory best practices.

Explore CIAM

B2B IAM

Streamlines building enterprise SSO, multi-tenant organization structures, and role-based access control into business software, scaling seamlessly as your business grows.

Explore B2B IAM

Core Functionality

— 06 capabilities

Identity
Verifies developer and Goose agent identities before session initiation across your ecosystem through a unified control plane.
Authorization
Enforces fine-grained, policy-based access control for every Goose tool execution and action.
Shell
Intercepts and secures terminal-level shell commands and local execution within Goose.
Audit
Logs complete audit trails for all session activity, tool invocations, and API calls.
Rollout
Supports seamless deployment with Observe mode for monitoring agent behavior and Enforce mode for strict permission enforcement.
Security Control
Provides vendor-agnostic governance across all AI tools, complete with instant token revocation to immediately cut off compromised sessions.